$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft File: mOHsvUXXh5-byUOfTGwvJxStNvU.mft (raw, json) Hash identifier: VvmCsjBUuuiWNyHEGcTwY5nw8shzAiZ6+ytUVNR3ZhM= Subject key identifier: 64:9B:1E:34:D5:A5:2E:A9:78:88:2F:47:E1:58:82:0D:E8:53:4B:DF Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Certificate serial: 0526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft Manifest number: 0503 Signing time: Fri 22 Aug 2025 23:56:04 +0000 Manifest this update: Fri 22 Aug 2025 23:56:03 +0000 Manifest next update: Fri 29 Aug 2025 23:56:03 +0000 Files and hashes: 1: mOHsvUXXh5-byUOfTGwvJxStNvU.crl (hash: 0PxRIsshSLi3Eoi9FLWzkgJEpxsBHGSGKplsCD8YgDQ=) 2: 4C304B9EA12F11EFBF514933C4F9AE02.roa (hash: lIJvzLYrLtuFIE0gyMhPk2/yxHi1SCB/LUlp5AIoj+E=) 3: 3B943DB8A12F11EF8A121F33C4F9AE02.roa (hash: wlCYlDts3RjNxBy/eT/e5B1Vtzz4yVgtwvYVdQThmhs=) 4: 6762893A976211EFA4D0606CC4F9AE02.roa (hash: /gYeqqbk6WlA+N6Yv/cuDVmH4COmNboDX4ybOjU2VTk=) 5: 5A67D452A12F11EF8CA59833C4F9AE02.roa (hash: u0zCnyDN76eHB+CmzgwmvJ+3FVkHG07LYemqATFaMtk=) 6: 29B935BCA12F11EF9FAFE232C4F9AE02.roa (hash: DkBXKwosqunys840APEr3udcdpKlpKYanK0TdpOCbNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1318 (0x526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91623B9, serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5 Validity Not Before: Aug 22 23:56:03 2025 GMT Not After : Aug 29 23:56:03 2025 GMT Subject: CN=68a90393-5da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:62:75:46:a4:6f:86:88:5d:2d:83:35:a1:df: 0c:05:e2:a4:76:b3:ab:0e:d6:e3:e8:9e:af:6d:ba: 79:8b:b6:bc:23:f5:c3:7d:9a:36:7b:9a:14:6f:c0: 21:8b:aa:86:37:47:c3:24:f6:86:ff:27:58:38:84: 31:e5:c7:5d:76:e2:31:34:44:28:b4:21:7e:24:ff: 54:cb:de:fb:c2:2f:48:1d:a9:bd:16:97:b2:c4:0c: aa:fd:b1:82:8c:99:4b:58:0e:54:20:a8:59:d0:7a: f5:84:0b:7a:7e:13:83:36:76:83:40:2a:52:7c:10: 82:a6:d7:cd:79:76:22:05:82:9d:0d:67:e6:f0:34: de:bb:d0:7c:ba:43:f4:d4:83:e9:7d:e2:f5:e8:ee: 6a:78:85:99:5c:38:a2:bd:6c:3b:88:a0:8e:28:2f: 21:9c:04:aa:6a:a3:af:26:e3:60:42:88:b8:70:94: c0:b2:ed:54:e2:2a:52:6f:15:b7:2d:a4:ea:ed:01: a0:a9:06:41:e3:f3:10:cf:b7:25:74:af:67:24:cf: 97:28:b8:8e:52:23:51:53:a8:39:97:a7:dd:7a:30: e5:27:ef:75:f4:f2:75:a5:25:14:1d:7b:4b:ff:91: de:c3:1a:9a:cd:0c:fd:27:42:a0:87:b8:22:a9:6f: ab:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9B:1E:34:D5:A5:2E:A9:78:88:2F:47:E1:58:82:0D:E8:53:4B:DF X509v3 Authority Key Identifier: keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:16:92:94:63:97:28:79:8b:92:45:33:d1:94:b0:6f:54:5c: cc:53:0f:b5:c4:b2:32:4e:85:0d:1b:7a:0d:06:a6:bf:f3:f7: a6:b5:df:7b:ff:4b:37:a8:07:c3:fc:92:47:c7:89:60:a8:11: b4:91:21:4a:9e:73:9e:62:cc:48:9c:9e:31:ba:52:1f:5c:19: fa:e1:a3:7e:73:a9:e3:bc:fc:e5:08:dd:d3:e3:70:d6:9a:2b: 67:20:5e:5b:a4:e1:67:99:2c:e0:0d:ed:6c:83:4c:ab:8e:97: ca:ba:dd:21:c9:b3:aa:14:83:c9:db:fd:48:43:ee:c8:f1:c1: a0:b0:cb:63:3f:22:52:5a:86:c4:1b:8d:88:84:40:ea:63:f5: 8a:50:ff:1e:0f:35:cb:e2:09:88:86:0b:58:aa:7f:33:b2:36: 5e:e5:a9:bf:47:31:1d:cf:6d:50:f3:bc:40:c0:c9:a2:c4:f0: b6:90:db:a7:4d:ee:ae:e7:ed:dc:88:3f:16:62:08:7c:c0:2d: 4a:94:48:c9:29:67:75:d9:a6:36:52:13:5e:e1:6f:27:50:38: 53:99:ab:56:88:b3:1d:de:03:e9:f4:08:86:d8:0a:be:3d:86: 7f:9a:7b:ca:c5:65:de:f4:e5:14:41:87:ca:e1:c0:bc:01:98: 43:ee:60:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3 MTRBRDM2RjUwHhcNMjUwODIyMjM1NjAzWhcNMjUwODI5MjM1NjAzWjAYMRYwFAYD VQQDEw02OGE5MDM5My01ZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA92J1RqRvhohdLYM1od8MBeKkdrOrDtbj6J6vbbp5i7a8I/XDfZo2e5oUb8Ah i6qGN0fDJPaG/ydYOIQx5cddduIxNEQotCF+JP9Uy977wi9IHam9FpeyxAyq/bGC jJlLWA5UIKhZ0Hr1hAt6fhODNnaDQCpSfBCCptfNeXYiBYKdDWfm8DTeu9B8ukP0 1IPpfeL16O5qeIWZXDiivWw7iKCOKC8hnASqaqOvJuNgQoi4cJTAsu1U4ipSbxW3 LaTq7QGgqQZB4/MQz7cldK9nJM+XKLiOUiNRU6g5l6fdejDlJ+919PJ1pSUUHXtL /5HewxqazQz9J0Kgh7giqW+rDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSbHjTV pS6peIgvR+FYgg3oU0vfMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjNCOS83OENFQUNCQzJCMzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1 LWJ5VU9mVEd3dkp4U3ROdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxFpKUY5coeYuSRTPRlLBvVFzMUw+1xLIyToUNG3oNBqa/8/emtd97 /0s3qAfD/JJHx4lgqBG0kSFKnnOeYsxInJ4xulIfXBn64aN+c6njvPzlCN3T43DW mitnIF5bpOFnmSzgDe1sg0yrjpfKut0hybOqFIPJ2/1IQ+7I8cGgsMtjPyJSWobE G42IhEDqY/WKUP8eDzXL4gmIhgtYqn8zsjZe5am/RzEdz21Q87xAwMmixPC2kNun Te6u5+3ciD8WYgh8wC1KlEjJKWd12aY2UhNe4W8nUDhTmatWiLMd3gPp9AiG2Aq+ PYZ/mnvKxWXe9OUUQYfK4cC8AZhD7mDa -----END CERTIFICATE-----Generated at Sat Aug 23 19:58:20 2025 by rpki-client